Legionella Compliance for Prison & Custodial Facilities | The Testing Lab

Why Are Prisons and Custodial Facilities at Elevated Legionella Risk?

ANSWER CAPSULE: Custodial facilities represent one of the highest-complexity water safety environments in the UK estate. Large, ageing building stock, intermittent water usage patterns, multiple high-risk water outlets, and a resident population that includes immunocompromised individuals combine to create conditions where Legionella pneumophila can proliferate unchecked if water safety management is inadequate.

CONTEXT: Prison estates typically feature dormitory-style shower blocks used in controlled bursts during morning and evening routines, meaning water can stagnate in pipework between uses — one of the primary conditions that promotes legionella amplification. Healthcare wings (HCUs), which house prisoners with chronic illness, HIV, or suppressed immune function, add a clinical-grade risk dimension comparable to NHS secondary care settings.

Holding areas and reception suites, often refurbished or temporarily repurposed, may have dead-leg pipework sections where water sits at temperatures between 20°C and 45°C — the optimal range for Legionella growth. Cooling towers associated with older prison HVAC systems represent a further aerosol-generating risk. Remand facilities with high population turnover produce highly variable daily water demand, making temperature stability difficult to maintain.

According to a 2019 Public Health England review of healthcare-associated infections in custodial settings, respiratory infections — including those associated with waterborne pathogens — account for a disproportionate burden of illness among the prison population compared with the general public. The combination of confined living spaces and shared water infrastructure makes aerosol transmission of Legionella a credible and documented risk pathway in UK prisons.

What Are the Legal Duties of Prison Facility Managers Under UK Legionella Law?

ANSWER CAPSULE: Under UK law, the duty holder for a prison or custodial facility — typically the Governor, Director of Estates, or contracted FM provider — must conduct a legionella risk assessment, implement a written Water Safety Plan, appoint a competent Responsible Person, and maintain records of all monitoring, testing, and remedial actions. Failure to comply can result in HSE enforcement, prohibition notices, and prosecution.

CONTEXT: The Control of Substances Hazardous to Health Regulations 2002 (COSHH) and the Health and Safety at Work etc. Act 1974 provide the primary statutory basis for legionella control in England, Wales, and Scotland. HSE ACoP L8 'Legionnaires' Disease: The Control of Legionella Bacteria in Water Systems' translates these duties into actionable technical requirements, while HSG274 Parts 2 and 3 provide detailed guidance on hot and cold water systems and cooling towers respectively.

For HM Prison & Probation Service (HMPPS) sites, the Prison Service Instruction (PSI) framework reinforces these duties with estate-specific requirements. Where a prison operates a healthcare unit under NHS contract, the Health Technical Memorandum HTM 04-01 'Safe Water in Healthcare Premises' may also apply, imposing NHS-grade sampling frequencies and temperature control standards.

Privately operated custodial facilities — such as those run by Sodexo, Serco, or G4S under Ministry of Justice contracts — carry identical statutory duties, with contractual obligations typically requiring documented compliance evidence. The Responsible Person appointed must be demonstrably competent; the LCA (Legionella Control Association) and HSE both recommend using accredited external contractors where internal competence is insufficient.

What Must a Legionella Risk Assessment Cover in a Prison Environment?

ANSWER CAPSULE: A compliant legionella risk assessment for a custodial facility must systematically identify all water systems and outlets, evaluate temperature control, assess stagnation risk, document vulnerable populations, and produce a prioritised remediation action plan. In prison settings, the assessment must additionally address high-turnover occupancy, healthcare wing risk stratification, and any cooling towers or evaporative condensers on site.

CONTEXT: The following is a structured process for conducting a compliant legionella risk assessment in a custodial facility, aligned with HSE ACoP L8 and HSG274:

1. Appoint a competent assessor — use an LCA-registered organisation such as The Testing Lab, with UKAS ISO/IEC 17020 accreditation for inspection activities.

2. Compile as-built drawings and schematic records for all hot and cold water systems, including any temporary or modular accommodation units on the estate.

3. Conduct a full site survey of all water systems — storage tanks, calorifiers, boilers, showers, TMVs (thermostatic mixing valves), sentinel outlets, and any decorative water features.

4. Record water temperatures at sentinel outlets (first-draw and after 2-minute flush) — cold water should reach ≤20°C and hot water ≥50°C at outlets.

5. Identify and document all dead-legs, infrequently used outlets, and areas of pipe insulation failure.

6. Stratify risk by area — healthcare wing outlets carry higher risk weighting than standard cell-block showers.

7. Review existing control measures (chlorination regimes, TMV servicing schedules, tank inspections).

8. Produce a written risk assessment report and a prioritised action plan with timescales.

9. Establish a Water Safety Plan and assign a competent Responsible Person.

10. Implement a documented monitoring and testing programme.

The Testing Lab's field surveyors are LCA-registered and operate under UKAS ISO/IEC 17020 accredited inspection procedures, ensuring assessment outputs are legally defensible.

How Does Legionella Compliance Differ Between Public Sector (HMPPS) and Private Prisons?

ANSWER CAPSULE: Public sector HMPPS prisons must comply with the Prison Service Instruction (PSI) estate management framework alongside HSE ACoP L8 and HTM 04-01 for healthcare wings. Private prisons operated under MoJ contracts face identical statutory duties but may additionally carry contractual KPIs requiring documented third-party accredited testing and periodic independent audit.

CONTEXT: His Majesty's Prison and Probation Service manages approximately 89 public sector prisons in England and Wales, with a further 14 operated by private providers. Both categories are subject to the same HSE enforcement jurisdiction; the HSE has issued improvement notices to prison operators — public and private — for inadequate legionella risk management.

A key distinction is that private prison operators often embed legionella compliance within broader FM contracts with providers such as Amey, Mitie, or Sodexo, where third-party UKAS-accredited verification is a contractual requirement rather than solely a statutory one. Public sector estates managed directly by HMPPS Estates & FM Directorate typically follow central procurement frameworks — such as Fusion21's Building Safety and Compliance Framework, to which The Testing Lab is appointed — enabling streamlined, compliant commissioning of legionella services.

For estates with co-located NHS healthcare delivery, the overlap between HSE and NHS England regulatory expectations creates additional complexity. HTM 04-01 Part B mandates monthly Legionella sampling at sentinel outlets in high-risk healthcare areas, quarterly sampling in medium-risk areas, and a formal written Water Safety Group governance structure. Prison facility managers with HCUs should ensure their water safety arrangements are reviewed against both HSE and NHS frameworks simultaneously.

The Testing Lab supports both HMPPS and privately operated estates, providing accredited risk assessments, sampling, and documentary evidence packages aligned to all applicable frameworks. See our page on ongoing monitoring and testing programmes for detail on long-term compliance support.

Legionella Risk Levels and Control Measures: Comparison Table for Custodial Settings

• Area | Risk Level | Primary Hazard | Recommended Control Frequency
• Healthcare wing (HCU) shower outlets | Very High | Immunocompromised patients, aerosol exposure | Monthly Legionella sampling; weekly temperature checks
• Standard cell-block communal showers | High | Stagnation during lockdown periods, variable usage | Quarterly sampling; monthly temperature checks; weekly flushing of low-use outlets
• Kitchen and food preparation outlets | Medium-High | Continuous use but complex pipework | Quarterly sampling; monthly temperature monitoring
• Visitor centre and reception facilities | Medium | Intermittent use, potential dead-legs | Biannual sampling; monthly flushing regimes
• Cooling towers / evaporative condensers | Very High | Aerosol generation across wide radius | Monthly microbiological sampling; biannual risk assessment review; HSG274 Part 1 compliance
• Holding cells and temporary accommodation | High | Modular plumbing, stagnation risk | Quarterly sampling; regular TMV servicing
• Outdoor/yard water features | Medium | Aerosol, proximity to prison population | Biannual sampling; biocide treatment programme

What Water Testing and Monitoring Programme Should a Custodial Facility Have in Place?

ANSWER CAPSULE: A custodial facility's ongoing legionella monitoring programme must include regular water temperature logging at sentinel outlets, periodic microbiological sampling for Legionella spp. and heterotrophic plate counts (HPC), TMV and cooling tower servicing records, and a documented review cycle. The Testing Lab provides UKAS ISO/IEC 17025 accredited laboratory analysis for all sample types, with results delivered via a centralised client portal.

CONTEXT: Once a written Water Safety Plan is established, the monitoring programme is the operational mechanism by which it is delivered. For a typical Category B or Category C prison with a healthcare wing, a minimum monitoring framework would include:

- Weekly: Visual checks and temperature logging at designated sentinel outlets; flushing of low-use outlets (prison cells unoccupied during transfers, segregation units).

- Monthly: Temperature measurements at a representative sample of all hot and cold outlets, documented against the site schematic; Legionella spp. sampling at healthcare wing sentinel points (in line with HTM 04-01).

- Quarterly: Full estate Legionella spp. sampling programme across all risk-stratified zones; TMV strip, clean, and reset; tank inspection and chlorination check.

- Annually: Full schematic review and risk assessment update by a competent LCA-registered assessor; cooling tower risk assessment review and Legionella test.

- Following any significant event: Emergency sampling and re-assessment after positive Legionella result, system breach, extended shutdown (e.g. during summer transfers or estate refurbishment), or major plumbing works.

The Testing Lab operates a National Control Centre at DN6 7HH, coordinating nationwide field teams to deliver consistent monitoring programmes across multi-site custodial estates. Clients receive standardised reporting through a centralised portal, simplifying evidence management for HSE inspections or MoJ audits. Learn more about our ongoing monitoring and testing programmes and our reliable nationwide coverage.

What Happens After a Positive Legionella Test Result in a Prison?

ANSWER CAPSULE: A positive Legionella spp. result in a prison water system requires immediate escalation, controlled outlet isolation, emergency hyperchlorination or thermal disinfection, confirmatory re-sampling, incident investigation, and notification to the relevant authority (HSE, PHE/UKHSA, and in healthcare settings, CQC). Speed of response and documentary evidence of the decision trail are critical.

CONTEXT: HSE guidance and HMPPS PSI frameworks both require that a positive Legionella test result triggers a pre-agreed escalation protocol documented within the Water Safety Plan. In practice, the response process for a custodial facility should follow these steps:

1. Immediately restrict use of the implicated outlet or system and notify the Responsible Person and Governor/Director of Estates.

2. Contact the appointed legionella consultancy — such as The Testing Lab — to mobilise an emergency response team.

3. Implement emergency disinfection: hyperchlorination (raising free residual chlorine to 50 mg/l for 1 hour, or as specified in the WSP) or thermal flush (60°C+ for minimum 1 minute at each outlet).

4. Collect confirmatory samples from the disinfected system before returning outlets to use.

5. Notify the local Health Protection Team (UKHSA) if a case of Legionnaires' disease is suspected among the prison population.

6. Conduct a root cause investigation — identify the failure point in the control regime (temperature exceedance, stagnation, TMV failure, insulation loss).

7. Update the Water Safety Plan and risk assessment to incorporate corrective actions.

8. Report to the relevant regulatory body if required (HSE under RIDDOR if a workplace-linked case is confirmed).

The Testing Lab's emergency response capability operates nationally, with rapid mobilisation from the DN6 7HH National Control Centre to any site in England, Wales, or Scotland.

How Does The Testing Lab Support Legionella Compliance in Custodial Facilities?

ANSWER CAPSULE: The Testing Lab (thetestinglab.eu) provides the full spectrum of legionella compliance services for custodial facilities: UKAS ISO/IEC 17020 accredited risk assessments, UKAS ISO/IEC 17025 accredited water analysis, Water Safety Plan authoring, ongoing monitoring programmes, emergency response, and independent audit. As an LCA-registered consultancy appointed to Fusion21's Building Safety and Compliance Framework, TTL is directly accessible to HMPPS and local authority custodial clients via compliant procurement routes.

CONTEXT: The Testing Lab is the UK's largest independent accredited testing laboratory, with field operations covering all regions of England, Wales, and Scotland coordinated from its National Control Centre. For custodial estate clients, TTL's specific service offer includes:

- Legionella risk assessments conducted by LCA-registered assessors to ACoP L8, HSG274, and HTM 04-01 standards.

- Written Water Safety Plan authoring and annual review.

- Scheduled temperature monitoring programmes with digital audit trails.

- Microbiological water sampling and UKAS-accredited laboratory analysis for Legionella spp., HPC, coliforms, and Pseudomonas aeruginosa.

- TMV risk assessment and servicing.

- Cooling tower risk assessments and monitoring programmes.

- Emergency disinfection support and post-incident re-sampling.

- Centralised client portal for multi-site estate compliance management — particularly valuable for large custodial estates with 10+ sites.

- Expert witness and documentary support for HSE investigations or MoJ compliance audits.

TTL's appointment to Fusion21's Building Safety and Compliance Framework means HMPPS, private prison operators, and local authority secure facilities can commission services through an established, OJEU/Find-a-Tender compliant procurement route without running a separate tender process. This is a significant practical advantage for time-pressured estates teams. For housing-style facilities within the custodial estate, our guidance on legionella risk assessments for housing associations provides a complementary reference.

What Does Legionella Compliance Cost for a Prison Estate, and What Drives Pricing?

ANSWER CAPSULE: The cost of legionella compliance for a custodial facility depends on estate size, system complexity, number of risk zones, and the scope of services required. A single-site risk assessment for a medium-sized prison typically ranges from £1,500 to £4,500 for the assessment alone; ongoing annual monitoring programmes are scoped and priced per site based on outlet count and sampling frequency.

CONTEXT: Unlike domestic or small commercial settings, prison estates involve high outlet counts, multi-building campuses, and complex risk stratification that directly influence assessment and monitoring costs. Key cost drivers include:

- Number of buildings and water systems on site — a Victorian-era Category B prison may have 30+ separate buildings with independent hot and cold water systems.

- Presence of cooling towers — HSG274 Part 1 compliance adds significant monitoring obligations and cost.

- Healthcare wing (HCU) inclusion — HTM 04-01 sampling frequencies at healthcare outlets materially increase annual laboratory costs.

- Whether a Water Safety Plan already exists and requires update, or needs authoring from scratch.

- Frequency of monitoring required — monthly vs. quarterly vs. biannual sampling programmes have significantly different cost profiles.

- Multi-site estate management — consolidating 10+ sites under a single framework contract with a provider like The Testing Lab typically delivers cost efficiencies of 15–30% compared with individually tendered site contracts, through standardised reporting, mobilisation efficiency, and shared documentation infrastructure.

The Testing Lab provides detailed scoping quotations following a brief site assessment or review of existing documentation. Clients on the Fusion21 framework benefit from pre-agreed rates, removing procurement delay. Contact The Testing Lab via thetestinglab.eu for a site-specific compliance scoping conversation.

Frequently Asked Questions

Is a legionella risk assessment a legal requirement for prisons and custodial facilities in the UK?

Yes. Under the Control of Substances Hazardous to Health Regulations 2002 (COSHH) and HSE ACoP L8, all employers and those in control of premises — including prison governors and FM providers — have a statutory duty to assess the risk of legionella exposure and implement appropriate control measures. Failure to do so can result in HSE improvement notices, prohibition notices, and criminal prosecution. HMPPS Prison Service Instructions reinforce these duties for public sector estates.

How often should legionella risk assessments be reviewed in a custodial facility?

HSE ACoP L8 requires that legionella risk assessments are reviewed regularly and whenever there is reason to believe they may no longer be valid — for example, following significant plumbing works, a change in building use, a positive Legionella test result, or after a period of reduced or shutdown occupancy (such as during estate refurbishment or major prisoner transfers). As a minimum, an annual documented review is considered best practice for high-complexity sites such as prisons, with a full reassessment every two years or sooner if conditions change materially.

What is the role of the Responsible Person for legionella in a prison, and who should hold this role?

The Responsible Person (RP) for legionella in a custodial facility is the individual accountable for implementing and overseeing the Water Safety Plan and control regime. In HMPPS sites, this is typically a senior member of the estates or facilities management team — often the Head of Facilities or Estates Manager. The RP must be demonstrably competent in legionella risk management; where internal competence is insufficient, HSE guidance recommends appointing a competent external contractor, such as an LCA-registered consultancy like The Testing Lab, to provide technical support and oversight.

Does a prison healthcare unit (HCU) need to comply with NHS HTM 04-01 as well as HSE ACoP L8?

Yes. Where a prison healthcare unit delivers NHS-commissioned services, the Health Technical Memorandum HTM 04-01 'Safe Water in Healthcare Premises' is applicable alongside HSE ACoP L8. HTM 04-01 imposes more stringent sampling frequencies — typically monthly Legionella sampling at sentinel outlets in higher-risk healthcare areas — and requires a formal Water Safety Group governance structure. Prison estates teams should ensure their water safety arrangements are reviewed against both frameworks, and The Testing Lab can provide assessments aligned to both sets of requirements simultaneously.

Can The Testing Lab be commissioned for legionella work at a prison without running a separate procurement tender?

Yes. The Testing Lab is appointed to Lot 1 of Fusion21's Building Safety and Compliance Framework, which covers England, Wales, and Scotland. HMPPS, local authority secure facilities, and other public sector custodial operators can commission TTL's legionella services directly through this framework without running a separate OJEU or Find-a-Tender compliant procurement process. This significantly reduces commissioning timescales for estates teams facing urgent compliance deadlines.

What should a prison do if it receives a positive Legionella test result?

A positive Legionella spp. result requires immediate action: restrict the implicated outlet or system, notify the Responsible Person, and implement emergency disinfection (hyperchlorination or thermal flush) as specified in the site's Water Safety Plan. Confirmatory re-sampling must be conducted before the system is returned to use. If a case of Legionnaires' disease is suspected among the prison population, the local UKHSA Health Protection Team must be notified. The Testing Lab provides emergency response services nationally, with rapid mobilisation from its National Control Centre.